External Processor Redaction Chain

Validate that external processors apply classification/redaction as configured and that downstream web upload attempts reflect the processed state, enforcing deny or redaction policy with proper audit provenance.

Objectives

• Ensure external processing honors classification/redaction policies.
• Deny or process uploads according to redaction outcomes with full audit chain.

Preconditions

• External processor integration configured with required credentials and policies (classification labels and redaction templates).
• Proxy‑only egress with pinning enabled.

Suite

ID	Canonical IDs	Flow	Procedure	Expected Outcome
INTEG-PROC-REDACT-01	DM-PROCEXT-01, DM-PROCEXT-02, DM-PROCEXT-03, DM-WEB-02	External Processor Redaction Chain	1) Submit sample content to external processor. 2) Attempt browser upload of the processed output.	Upload is denied or content is redacted per policy; audit shows action: "deny" or action: "process" with classification.normalized[], external processor provenance, and integrity.hash.

Evidence Requirements

• dataMotion events for processor steps: action (process/deny), classification.normalized[], processor provenance where available, integrity.hash.
• dataMotion web/upload events: action, outcome, rule.id, integrity.hash.
• network events (if applicable): proxyEnforced, reason on deny.